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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 
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1)S Responsive to communication(s) filed on 04 August 2005 . 
2a)S This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
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4) ^ Claim(s) 1-16 is/are pending in the application. 
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5) D Claim(s) is/are allowed. 
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Replacement drawing sheet(s) including the correction is required ifthe drawing(s) is objected to. See 37 CFR 1.121(d). 
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Response to Amendment 

This office action is responsive to Applicant's amendment filed on August 4, 
2005. Claims 1-16 are pending. 



Response to Arguments 

Applicant's arguments filed August 4, 2005 have been fully considered but they 
are not persuasive. 

Applicant argues that the combination of Bailey and Cane fails to disclose 
"generating an authentication code for a bundle that is ultimately added to and 
encrypted with the bundle". 

Examiner responds that Cane discloses the use of checksums such as CRC, 
MD4, and MD5 as the authentication code for verification of data/file integrity. Such 
authentication codes are part of the packet/bundle to be transmitted via Internet, dialup 
connection, and generally across the network in an encrypted form by any of the various 
known methods such as RSA and DES (Col. 4, lines 1-27). 



Examiner respectfully maintains the rejection formulated on Apr. 26, 2005 as 



follows: 



Claim Rejections - 35 USC § 103 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 



obviousness rejections set forth in this Office action: 



(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
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invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-16 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bailey, III, (U.S. Patent No. 5,659,614 and Bailey hereinafter), in view of Cane et al., 
(U.S. Patent No. 5,940,507 and Cane hereinafter). 

Regarding claims 1 and 9, Bailey discloses a method of backing up one or more 
files on a local device onto remote servers over a network comprising: 

deriving a first cryptographic key and a second cryptographic key from a user- 
provided passphrase (Col. 17-18, lines 1-67 and Col. 19, lines 1-5); 

compressing one or more files and adding each of the files to a bundle, and 
encrypting the bundle using the second cryptographic key prior to sending the bundle to 
the remote server (Col. 17, lines 50-67 and Col. 18, lines 1-53). 

Bailey does not expressly discloses generating an authentication code for the 
bundle using the first cryptographic key and adding the authentication code to the 
bundle. 

However, Cane discloses generating an authentication code for the bundle using 
the first cryptographic key and adding the authentication code to the bundle (Col. 3, 
lines 55-67 and Col. 4, lines 1-37). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of applicant's invention to modify Bailey's method and system for creating and 
storing a back up copy of file data stored on a computer by including the capability to 
generating an authentication code (i.e., CRC) for the bundle (i.e., message) using the 
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first cryptographic key and adding the authentication code to the bundle as disclosed 
by Cane. This modification would have been obvious because one of ordinary skill in 
the art would have been motivated by the suggestion of Cane to make it difficult to 
determine the original data without the proper key and ensure privacy and integrity of 
data upon retrieval (Cane, Col. 2, lines 10-35 and Abstract). 

Regarding claims 5 and 13, Bailey discloses a method of restoring one or more 
files on remote servers to a local device over a network comprising: 

deriving a first cryptographic key and a second cryptographic key from a user- 
provided passphrase (Col. 17-18, lines 1-67 and Col. 19, lines 1-5); 

decompressing one or more files from the bundle, and decrypting a bundle 
received from the remote server using the second cryptographic key (Col. 5, lines 7-33). 

Bailey does not expressly disclose checking an authentication code in the bundle 
using the first cryptographic key. 

However, Cane discloses checking an authentication code in the bundle using 
the first cryptographic key (Col. 3, lines 55-67 and Col. 4, lines 1-37). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of applicant's invention to modify Bailey's method and system for creating and 
storing a back up copy of file data stored on a computer by including the capability to 
checking an authentication code in the bundle using the first cryptographic key as 
disclosed by Cane. This modification would have been obvious because one of 
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ordinary skill in the art would have been motivated by the suggestion of Cane to ensure 
privacy and integrity of data upon retrieval (Cane, Abstract). 

Regarding claims 2 t 6, 10, and 14, Bailey does not expressly disclose wherein 
the bundle is encrypted using a strong block cipher. 

However, Cane discloses wherein the bundle is encrypted using a strong block 
cipher (Col. 3, lines 55-67 and Col. 4, lines 1-37). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of applicant's invention to modify Bailey's method and system for creating and 
storing a back up copy of file data stored on a computer by including wherein the 
bundle is encrypted using a strong block cipher as disclosed by Cane. This 
modification would have been obvious because one of ordinary skill in the art would 
have been motivated by the suggestion of Cane to ensure privacy and integrity of data 
upon retrieval (Cane, Abstract). 

Regarding claims 4, 8, 12, and 16, Bailey does not expressly disclose wherein 
the cryptographic keys contain at least 128 bits. 

However, Cane discloses wherein the cryptographic keys contain at least 128 
bits (Col. 3, lines 55-67 and Col. 4, lines 1-37)(Note that MD2, MD4, and MD5 are 
message-digest algorithms. They are meant for digital signature applications where a 
large message has to be "compressed" in a secure manner before being signed with 
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the private key. All three algorithms take a message of arbitrary length and produce a 

128-bit message digest). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of applicant's invention to modify Bailey's method and system for creating and 
storing a back up copy of file data stored on a computer by including wherein the 
cryptographic keys contain at least 128 bits as disclosed by Cane. This modification 
would have been obvious because one of ordinary skill in the art would have been 
motivated by the suggestion of Cane to ensure privacy and integrity of data upon 
retrieval (Cane, Abstract). 

Claims 3, 7, 11, and 15 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Bailey, III, (U.S. Patent No. 5,659,614 and Bailey hereinafter) and 
Cane et al., (U.S. Patent No. 5,940,507 and Cane hereinafter), in view of Walmsley, 
(U.S. Publication No. 2004/0049468 and Walmsley hereinafter). 

Regarding claims 3, 7, 1 1, and 15, Bailey or Cane does not expressly disclose 
wherein the authentication code is an HMAC. 

However, Walmsley discloses wherein the authentication code is an HMAC 
(Pages 7-8, Par. 0157-0176). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of applicant's invention to modify the combined method and system of Bailey 
and Cane by including wherein the authentication code is an HMAC. This modification 
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would have been obvious because one of ordinary skill in the art would have been 
motivated by the suggestion of Walmsley to provide for a solution for Internet message 
authentication security protocols (Walmsley, Page 7, Par. 0158). 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Arezoo Sherkat whose telephone number is (571) 272- 
3796. The examiner can normally be reached on 8:00-4:30 Monday-Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571 ) 272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Arezoo Sherkat 
Patent Examiner 
Group 21 31 
Oct. 12, 2005 
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